The Sandbox Pledges 1:1 Refund After $700K Bridge Exploit

Blockchain gaming platform The Sandbox has committed to repaying affected users at a 1:1 ratio following an Aug. 21 bridge exploit that drained approximately 14.744 million SAND tokens, worth around $700,000, from an Ethereum vault. In a post-mortem published Thursday, the project said eligible holders who legitimately held bridged SAND on Base or BNB Smart Chain prior to the attack will receive an equivalent amount of Ethereum-based SAND, sourced entirely from The Sandbox's treasury with no new tokens minted.

The claims process is expected to open within two weeks and remain available for a two-week window. The Sandbox noted that two centralized exchanges hold more than 72% of the eligible balances and will distribute compensation directly to impacted customers. According to the project's analysis, the attacker exploited a configuration flaw in SAND's Base and BNB Chain contracts, enabling them to become the sole verifier of incoming bridge messages and mint unbacked tokens. Although more than 339 trillion unbacked SAND was minted across the two networks, The Sandbox confirmed those tokens have been isolated and cannot be bridged or redeemed, while SAND on Ethereum and Polygon remained unaffected.

The compromised bridge contracts will be permanently retired, with any future Base or BNB Chain bridges deployed under new contracts. The drained amount represents roughly 0.5% of SAND's 3 billion maximum supply. At the time of publication, SAND was trading at approximately $0.04, down 10.4% over the previous seven days, according to CoinGecko.